Aston Link — Privacy Policy

DRAFT (version 2026-09-27-draft-5). Not yet reviewed by a lawyer.

Aston Link is a service of Aston ERP Solutions, Toronto, Ontario. This policy explains what personal information we handle and why, under Canada's PIPEDA.

1. Your account. Your email address and name, the workspaces you belong to, your sign-in times and the language and display settings you choose. Used to sign you in and run your account.
2. Your business information. What you enter in the setup and the Business profile, your never-contact list, notes, drafts and emails. It belongs to you and is used only to provide the service to you.
3. Free trial requests. When you ask for a free trial: your business email address, company name, website, business address, phone number, province, industry, approximate number of staff, your role and how you heard about us, plus the IP address and a browser fingerprint (a technical summary of your browser) from your sign-up and your request. We use them to check that the request comes from a real business, to keep to one free trial per company, and to contact you about your request. They are seen only by the Aston Link team. We keep them while your account is open; for a refused request, up to 12 months after the decision, so the same trial isn't requested again.
4. Aston Link news (optional). Only if you tick the box: occasional news and tips by email. We record when you agreed (Canada's anti-spam law, CASL). You can unsubscribe from any of these emails, or ask us, at any time.
5. Companies we find for you. Business names, addresses, phone numbers, websites and published business email addresses from public sources such as Google Maps and company websites. We keep only what we are allowed to keep, honour unsubscribe requests, and never sell this information.
6. Payments. Card payments, plans and saved cards are handled by Stripe; we never see or store card numbers. To show you which card is saved we keep only its brand, last 4 digits and expiry.
7. Service providers. Cloudflare (security and hosting), Oracle Cloud (servers), Google (maps data), Anthropic (the AI that reads websites and drafts emails), Brevo (sign-in and account emails) and Stripe (payments). They process data only to provide their part of the service. Transactional emails (sign-in codes, invitations, receipts, notifications) are sent through Brevo and may include open and click tracking by Brevo (whether an email was opened and which link was clicked); we switch that tracking off where Brevo allows it, and use any such data only to check that our emails arrive.
8. Security. Access is protected by sign-in codes and encryption; mailbox passwords are stored encrypted.
9. How long. While your account is open, and then only as long as the law requires.
10. Your rights. You can ask to see, correct or delete your personal information, and ask questions about this policy: support@astonlink.ca.